Legal Drafts for early access
Policies.
The terms for Iris and Iris Cloud, the privacy policy and the other policies, as they are drafted today. The same documents are in the app under Settings, About & legal.
Iris Cloud terms of service
Version: 0.1-draft · Effective: Draft, not yet final
These terms are between you and Jacob Foscalina, doing business as Iris Studio, a sole proprietor in California ("we", "us"). Mailing address: coming soon; until then, write to legal@buildwithiris.com. They cover Iris Cloud: the paid subscription and credits that run Iris's AI features on cloud AI models through our service.
You accept these terms when you create an Iris Cloud account or start a subscription. They apply in addition to the End-user licence agreement for the Iris app, and they include the Acceptable use policy and the Refund policy. The Privacy policy explains how we handle personal data.
The short version
This summary is here to help you read the terms. The full text below is what counts.
- Iris Cloud is the only way to use cloud AI in Iris. Without it, Iris uses the AI model on your own computer, for free.
- Your subscription renews automatically until you cancel. You can cancel online at any time on your account page, which the Iris app opens for you, in a few clicks.
- Each plan includes credits every billing period. Iris shows what a job will cost before it starts. You can buy extra credit packs.
- Your briefs, photos and websites stay yours. Our service passes the AI work to Anthropic and returns the result. It does not keep the content of your prompts or your sites.
- AI can be wrong. Do not rely on factual statements in AI output without checking them yourself.
- We may suspend accounts that are used for abuse.
1. What Iris Cloud is
1.1 Iris Cloud runs the AI parts of Iris (planning, writing, designing, reviewing and repairing websites, and other AI features in the app) on cloud AI models. Today those models are Claude models provided by Anthropic, PBC, which we use under our own agreement with Anthropic. We may change the models or providers we use; the Subprocessors page lists the current ones.
1.2 Iris Cloud is a feature of Iris. It is not access to Anthropic's services or to any AI model as such. You may only use it through the Iris app, for the features the app offers.
1.3 Building and checking your websites still happens on your computer, in Iris's own Podman (or Docker Desktop if you chose it). Iris Cloud replaces only the AI model.
2. Your account
2.1 You must be at least 18, or the age of majority where you live if that is higher, and able to make a binding contract. If you sign up for a business, you confirm you may accept these terms for it.
2.2 Give us accurate information and keep it up to date. Keep your sign-in details safe and do not share your account. You are responsible for everything done with your account. Tell us straight away at support@buildwithiris.com if you think someone else has used it.
2.3 Iris Cloud is available only in the United States.
3. Plans, renewal and payment
3.1 Plans and prices. The plans, what each includes, its price, its billing period and any taxes are shown before you pay, and on our pricing page. Prices are in US dollars unless shown otherwise.
3.2 Automatic renewal. Your subscription starts when you pay and renews automatically at the end of each billing period (monthly or yearly, as you chose) at the price then in effect, until you cancel. We charge your payment method at the start of each period. At checkout we ask you to agree to this separately, and afterwards we email you a confirmation with the renewal terms, the price, the billing period and how to cancel.
3.3 Free trials and introductory prices. If we offer one, we tell you before you start a trial or an introductory price how long it lasts, what the price will be afterwards, when you will first be charged, and how to cancel before then. We send any reminder the law requires before a trial ends.
3.4 Reminders. We send any renewal reminder the law requires, including a reminder each year for annual or long-running subscriptions with the price, how often it renews and how to cancel.
3.5 Price changes. We will tell you about a price change, or a material change to what your plan includes, before it applies to you, with the timing the law requires (in California, between 7 and 30 days before it takes effect). If you do not want to pay the new price, cancel before it applies.
3.6 Payments. Payments are processed by Stripe, which handles your card or other payment details under its own terms. We do not store your full card number. If a payment fails, we may retry it and tell you. If it still fails, your account may move to free use (the AI model on your computer) until you pay.
3.7 Taxes. Prices may not include sales tax, VAT or similar taxes. Where we must collect them, we add them at checkout.
4. How to cancel
4.1 You can cancel at any time, online, without calling or chatting with anyone:
- from Iris: Models → AI engine → Iris Cloud → Manage or cancel plan opens your account page, with Cancel subscription; or
- on your account page at https://cloud.buildwithiris.com/account; or
- by emailing support@buildwithiris.com from the address on your account.
4.2 Cancelling stops future renewals. You keep Iris Cloud until the end of the period you have paid for, then your account moves to free use. We email you a confirmation when you cancel. If we offer you something to stay, you can still cancel straight away.
4.3 Refunds are described in the Refund policy. Cancelling does not by itself refund the current period, except where that policy or the law says so.
4.4 You can also close your account entirely. That deletes your account data as described in the Privacy policy. Your projects and websites stay on your computer.
5. Credits
5.1 What credits are. AI work in Iris Cloud uses credits. Each job uses credits according to how much AI work it needs. Before a large job (such as a new website or a new version of a site), Iris shows an estimate and asks you to confirm. Your balance and history are in Iris and on your account page.
5.2 Plan credits. Your plan gives you a number of credits each billing period. Unused plan credits roll over for up to 3 months, then expire. The oldest credits are used first.
5.3 Credit packs. You can buy extra credit packs. Pack credits are used after your plan credits. Pack credits do not expire while your account is open. Pack credits stay usable after you cancel a subscription.
5.4 Failed jobs. If a job fails because of a problem on our side or our provider's side, we return the credits it used, on request.
5.5 What credits are not. Credits are a measure of use of Iris Cloud. They have no cash value, cannot be sold or transferred, are not a deposit or a gift card, and are refunded only as the Refund policy or the law says.
5.6 Metering. Our service counts the credits each job uses. If you think a count is wrong, tell us within 60 days at support@buildwithiris.com and we will look into it.
6. Fair use
6.1 Iris Cloud is for building and editing websites with the Iris app. To keep it fast and fair for everyone, you may not:
- share an account between people or organisations;
- send work to Iris Cloud other than through an unmodified Iris app, script it, or automate it to run far beyond normal use;
- resell Iris Cloud, or use it to provide an AI service to others;
- use it, or its output, to build or train a competing AI model or service;
- try to get around credits, limits, metering or safety systems.
6.2 We may set reasonable limits on how much and how quickly you can use Iris Cloud, and slow down or pause jobs that would harm the service for others. We tell you in the app when a limit applies.
7. Acceptable use and suspension
7.1 You must follow the Acceptable use policy. Because Iris Cloud uses Anthropic's models, it also requires you to follow Anthropic's Usage Policy.
7.2 We may suspend or limit your Iris Cloud access, with notice where reasonable and immediately where needed, if:
- you break these terms or the Acceptable use policy, or a provider tells us your use breaks its policies;
- your use puts the service, other users, our providers or the public at risk;
- you do not pay; or
- the law or a lawful request requires it.
7.3 We will tell you why where we lawfully can, and you can ask us to review the decision at support@buildwithiris.com. If we close your account for a serious breach, unused credits are not refunded unless the law requires it. Suspension does not affect your projects or websites on your computer.
8. Your content
8.1 Your briefs, text, photos, code and other material, and the output Iris Cloud returns, stay yours, as the End-user licence agreement describes.
8.2 You give us permission to send your content to our AI provider and to process it as needed to run Iris Cloud for you. Our service passes your requests through to the provider and returns the results; it does not store the content of your prompts or your websites (see the Privacy policy). Anthropic processes them under its commercial terms, which do not allow it to train its models on them.
8.3 You confirm you have the rights to the content you send, and that sending it does not break the law or anyone else's rights.
9. AI output
9.1 Factual statements in AI output may be inaccurate, incomplete, misleading or out of date. Do not rely on them without checking them independently. AI output may also not reflect our views or those of Anthropic.
9.2 You decide whether AI output is right for your use and whether a person needs to review it. Read every page before you publish. If your website gives legal, medical, financial, insurance, housing, employment or similar advice, a qualified person must review the AI-written content, and you must tell your visitors where the law requires it.
9.3 AI output is not professional advice from us.
10. Service availability and changes
10.1 We work to keep Iris Cloud available and fast, but we do not promise that it will be uninterrupted or error-free. It depends on providers such as Anthropic and our hosting company, and it may be unavailable for maintenance, outages or limits outside our control.
10.2 When Iris Cloud is unavailable, Iris can keep working with the AI model on your computer, if your computer can run it.
10.3 We may change, add or remove features and models. If a change materially reduces what your paid plan includes, we tell you in advance, and you may cancel and receive a refund for the unused part of the period you paid for.
10.4 If we stop offering Iris Cloud, we tell you at least 30 days in advance and refund the unused part of your prepaid subscription.
11. Third-party services
Iris Cloud relies on services from other companies, such as Anthropic for AI models and Stripe for payments. The services you connect to your own websites (such as Stripe, PayPal, Shopify, email and hosting providers) are between you and them, not part of Iris Cloud.
12. No warranty
Apart from what these terms say, Iris Cloud is provided "as is" and "as available". To the fullest extent the law allows, we disclaim all warranties, whether express, implied or statutory, including merchantability, fitness for a particular purpose, title and non-infringement, and any warranty that AI output is accurate. Consumers keep any rights the law gives them that cannot be excluded.
13. Limit of liability
13.1 To the fullest extent the law allows, we are not liable for any indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, revenue, data, goodwill or business, arising from Iris Cloud or these terms.
13.2 To the fullest extent the law allows, our total liability for all claims about Iris Cloud or these terms is limited to the greater of the amounts you paid us for Iris Cloud in the 12 months before the claim arose, or US$100.
13.3 Nothing in these terms limits liability that the law does not allow to be limited.
14. Indemnity
You will defend and indemnify us, and our providers where we are required to protect them, against third-party claims arising from your content, the websites you make or publish, your use of Iris Cloud in breach of these terms, the Acceptable use policy or Anthropic's Usage Policy, and pay the resulting costs and damages a court awards or that you agree to in a settlement. If you are a consumer, this applies only as far as the law allows.
15. Ending these terms
15.1 You can stop using Iris Cloud and close your account at any time (section 4).
15.2 We can end these terms or close your account for the reasons in section 7, or if we stop offering Iris Cloud (section 10.4).
15.3 Sections 5.5, 8, 9 and 12 to 17 continue to apply after these terms end.
16. Governing law and disputes
16.1 These terms are governed by the laws of the State of California and applicable US federal law, without regard to conflict-of-laws rules.
16.2 Before starting a formal dispute, contact us at legal@buildwithiris.com so we can try to resolve it within 60 days.
16.3 How disputes that cannot be settled this way are decided is still under review and will be set out here in the final version.
16.4 If you are a consumer in the European Union, the United Kingdom or another country whose laws give you the right to bring claims in your local courts, or under your local law, this section does not take that right away.
17. General
17.1 Changes to these terms. We may update these terms. For changes that materially affect you, we give at least 30 days' notice by email or in the app before they apply, except where a change is needed sooner for legal or security reasons. If you do not agree, cancel before the change applies. Price changes follow section 3.5.
17.2 Export controls and sanctions. You confirm you are not barred from using Iris Cloud under US or other applicable export or sanctions laws.
17.3 Whole agreement, severability, waiver, assignment. These terms, with the documents they include, are the whole agreement about Iris Cloud. If part is unenforceable, the rest still applies. Not enforcing a term is not a waiver. You may not transfer these terms without our consent; we may transfer them with our business.
17.4 Notices. We send notices to the email on your account or show them in the app. Send notices to us at legal@buildwithiris.com (mailing address: coming soon).
Iris Cloud refund policy
Version: 0.1-draft · Effective: Draft, not yet final
This policy explains when we refund payments for Iris Cloud. It is part of the Iris Cloud terms of service. The Iris desktop app is free, so there is nothing to refund for it.
1. Subscriptions
- Cancel any time. Cancelling stops the next renewal. You keep Iris Cloud until the end of the period you have paid for.
- First payment. If you are not happy with Iris Cloud, ask within 14 days of your first subscription payment and we refund it in full, as long as you have used less than 20% of that period's credits.
- Renewals. If you forgot to cancel and have not used any credits since the renewal, ask within 7 days of the renewal and we refund it.
- Partial periods. Apart from the cases on this page, we do not refund the unused part of a period when you cancel.
2. Credit packs
- Unused credit packs can be refunded within 14 days of purchase.
- Credits that have been used are not refunded.
3. Problems on our side
- Failed jobs. If a job fails because of a problem with Iris Cloud or our AI provider, we return the credits it used when you ask.
- Outages and removed features. If Iris Cloud is unavailable for a long time, or we remove something your paid plan includes, we refund the affected part of your payment.
- If we stop Iris Cloud, we refund the unused part of your prepaid subscription.
- Billing mistakes. Double charges and other billing errors are always refunded.
4. Your legal rights
Nothing in this policy limits the rights consumer law gives you.
If you live in the European Union or the United Kingdom, you normally have 14 days to withdraw from an online purchase. At checkout we ask you to agree that Iris Cloud starts straight away and to confirm that you lose the right to withdraw once you have fully used the service; if you withdraw within 14 days after using part of it, we may keep an amount in proportion to what you used.
5. How to ask for a refund
Email support@buildwithiris.com from the address on your account, or use Request a refund next to the payment under Billing on your account page at https://cloud.buildwithiris.com/account. Tell us which payment and why. We answer within 5 business days. Approved refunds go back to the original payment method, usually within 5 to 10 business days, depending on Stripe and your bank.
6. Chargebacks
Please contact us before disputing a charge with your bank: most problems are quicker to fix directly. While a chargeback is open, we may pause Iris Cloud on the account. This does not affect your projects or websites on your computer.
Iris privacy policy
Version: 0.1-draft · Effective: Draft, not yet final
This policy explains how Iris Studio (Jacob Foscalina, "we", "us") handles personal data in the Iris desktop app and in Iris Cloud, our paid cloud AI service.
Questions or requests: privacy@buildwithiris.com.
The short version
- Iris is local-first. Your projects, briefs, photos, websites and keys stay on your computer. With the free app, the AI model runs on your computer too, and nothing you build is sent to us.
- Iris Cloud sends the AI work for your projects through our service to Anthropic, which runs the Claude models, and returns the results. Our service does not keep the content of your prompts or your websites. It keeps your account, billing and how many credits each job used.
- Services you connect to your websites (payments, Shopify, email, newsletters, analytics, maps, photo search, hosting) receive data only when you use them, directly from your computer, under your own account with them.
- Iris sends no telemetry or crash reports unless you turn them on.
- We do not sell your personal information or use it for targeted advertising.
1. What stays on your computer
Iris keeps these in its data folder on your computer (Settings → Storage shows where). We cannot see or access them:
- your projects: briefs, business details, text, photos, logos, artwork, product and booking setup, and every version of every website;
- the websites' code, previews, exports, quality reports and screenshots Iris takes while checking them;
- keys and sign-ins for the services you connect to your websites (Stripe, PayPal, Square, Plaid, Shopify, email and newsletter services, analytics, Unsplash, Pexels, Cloudflare, Netlify, Vercel, GitHub and others), encrypted for your Windows account;
- logs of what Iris did, which stay on your computer unless you send them to us;
- your settings, and the record of when you accepted Iris's terms and which version.
When you use the free app with the AI model on your computer (Iris's own Ollama and Qwen), the AI work happens on your computer and nothing about your projects is sent to us or to any AI provider.
Generated website code runs only inside a locked-down container on your computer (Iris's own Podman, or Docker Desktop if you chose it), with its network access restricted while it is built and checked.
2. When data leaves your computer
Data leaves your computer only when you use a feature that needs it.
2.1 Iris Cloud (cloud AI)
Iris Cloud is the only way to use cloud AI in Iris. When it is on, Iris sends the AI work for a job through our gateway to our AI provider, Anthropic, PBC (United States), and returns the result. Depending on the job, that work contains:
- your brief and business details, page text, design choices and code from your project;
- screenshots of your website's pages, for design review;
- descriptions and placement notes of your photos; and
- any personal data you put in them, such as names, addresses or quotes.
What our gateway does with it: it checks your account and credits, passes the request to Anthropic, counts the credits used and passes the answer back. It does not store the content of your prompts, your websites or the AI's answers.
What Anthropic does with it: Anthropic processes it to provide the AI model to us, under its commercial terms and data processing addendum. Those terms do not allow Anthropic to train its models on it. Anthropic keeps requests and answers for a limited time for safety and abuse monitoring, and longer where needed to enforce its Usage Policy or where the law requires.
2.2 Services you connect to your websites
When you connect a service to a website, you use your own account and keys with that service, and Iris talks to it from your computer. That service receives what the feature needs, such as your key, product or price details, the files of the site you publish, or the search words for a photo. Those services are not our processors: your agreement and their privacy policies apply, and we do not receive that data. They include:
- payments and stores: Stripe, PayPal, Square, Plaid, Shopify;
- email, forms and newsletters: Resend, Postmark, FormSubmit, Web3Forms, Formspree, Mailchimp, Kit, Buttondown, Klaviyo;
- analytics and maps: Plausible, Umami, Google Analytics, map providers;
- photos: Openverse (no account or key), existing Pexels connections, and earlier Unsplash photos. Openverse searches go through our gateway, which receives the search words, your IP address and a random id for your Iris installation (to share Openverse's limits fairly between installations) and passes only the search to Openverse, under Iris's own registered application. Picked Openverse images are downloaded from Flickr or Wikimedia and stored with your site;
- publishing: Cloudflare, Netlify, Vercel, GitHub and other Git hosts, and your domain's DNS provider.
When your published website runs, its visitors' data (orders, bookings, accounts, form messages, analytics) goes to the services you chose and to the place you publish the site, under your accounts. You are the controller of your visitors' data. Iris can write a draft privacy policy for your website from its real setup.
2.3 Installing and downloading
When you set up or click to download them, Iris's own Podman downloads its Linux machine image from the Podman project's registry (quay.io) and the site builder's base system from Docker Hub; if you choose Docker Desktop instead, Iris downloads it from its maker through Windows Package Manager; Iris's own Ollama downloads the AI model from Ollama's model library (registry.ollama.ai); and the photo tools download their model files from GitHub. Those services see your computer's IP address and what was downloaded, under their own privacy policies.
2.4 Update checks
When Iris checks for updates, it asks our update server whether a newer version exists. The request includes the installed version, the Windows version and your IP address. We keep these requests for up to 30 days to run the update service.
2.5 Telemetry and crash reports (only if you turn them on)
Iris does not send usage statistics or crash reports today. If we add them, they will be off until you turn them on, and you can turn them off at any time in Settings. They would contain the Iris version, the Windows version, the feature used and, for a crash, the error and where in Iris it happened, with file paths and names removed. They would never contain your project content, your keys or your websites.
2.6 When you contact us
If you email us, we receive your email address, your message and anything you attach (for example logs). We use it to answer you.
3. What Iris Cloud keeps
| What | Examples | Why |
|---|---|---|
| Account | email address, name, sign-in method, password hash or sign-in provider id, account settings, country | to run your account |
| Billing | plan, subscription status, renewal and cancellation dates, invoices, credit pack purchases, billing address and tax details | to charge you, keep tax records and keep proof of your renewal consent |
| Usage metering | time of each job, kind of job, model used, number of tokens and credits, job outcome, request id, Iris version | to count credits, show your history, prevent abuse and plan capacity |
| Security | IP address, device and session identifiers, sign-in events, rate-limit and abuse flags | to protect accounts and the service |
| Support and reports | your messages to us, abuse reports and our decisions | to help you and handle reports |
We do not keep the content of your prompts, your websites or the AI's answers.
4. Payments
Payments for Iris Cloud are handled by Stripe. It collects your card or other payment details directly and processes them under its own privacy policy. We receive only what we need to manage your subscription: the payment status, the card brand, the last four digits, the expiry date, your billing country and postcode.
5. Why we use personal data (legal bases)
Where the GDPR or UK GDPR applies, we rely on:
- contract: to provide your account, Iris Cloud and billing;
- legitimate interests: to secure the service, prevent fraud and abuse, measure use to plan capacity, and improve Iris, balanced against your rights;
- legal obligation: tax, accounting and responding to lawful requests;
- consent: telemetry and crash reports, and marketing emails. You can withdraw consent at any time.
6. How long we keep it
- Account data: while your account is open, then deleted within 30 days of closing it, apart from what we must keep.
- Billing records: 7 years, for tax and accounting.
- Proof of renewal consent: at least 3 years, or 1 year after the subscription ends, whichever is longer.
- Usage metering: 24 months.
- Security logs: 90 days.
- Support emails and abuse reports: 3 years.
- Telemetry and crash reports (if on): 12 months.
7. Who we share it with
- Subprocessors that run Iris Cloud for us, listed on the Subprocessors page, under contracts that limit their use of the data.
- Authorities, when the law requires it, or to protect people from harm, including reporting child sexual abuse material.
- A buyer of our business, if we sell or merge it, under this policy.
We do not sell personal information and do not share it for cross-context behavioural advertising.
8. International transfers
We are based in the United States, and our main providers process data there. When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland, we use the EU Standard Contractual Clauses and the UK Addendum, or the EU-US Data Privacy Framework.
9. Your rights
9.1 Everyone
You can ask us for a copy of your personal data, to correct it or to delete it, and you can close your account at any time. Most of your data is on your own computer, under your control: deleting a project or uninstalling Iris removes it.
9.2 European Economic Area and United Kingdom (GDPR and UK GDPR)
You have the right to access, correct, delete, restrict and port your data, to object to processing based on legitimate interests, to withdraw consent, and to complain to your data protection authority (in the UK, the Information Commissioner's Office). We answer within one month.
9.3 California and other US states (CCPA/CPRA and similar laws)
You have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of its sale or sharing (we do not sell or share it); and to limit the use of sensitive personal information (we use it only as needed to run the service, such as your account sign-in). We will not treat you differently for using these rights. You may use an authorised agent. We verify requests by confirming control of your account email, and we answer within 45 days.
In the last 12 months we collected these categories, from you and your use of Iris Cloud, for the purposes in section 3: identifiers (name, email, IP address, account id); commercial information (plan, purchases, credit history); internet or other network activity (usage metering, security logs); approximate location (country, from billing and IP address); and account login credentials. We disclosed them only to the subprocessors listed, for business purposes.
9.4 How to ask
Email privacy@buildwithiris.com, or use the Privacy section of your account page at https://cloud.buildwithiris.com/account to download your data or close your account. We may ask you to confirm your identity first.
10. Security
Iris keeps your projects on your computer and runs generated code only in a locked-down container. Iris Cloud uses encrypted connections, limits access to personal data to the people who need it, and does not store your prompt or website content. No system is perfectly secure: keep your computer, your Windows account and your Iris Cloud sign-in safe.
11. Children
Iris and Iris Cloud are for adults and businesses. They are not meant for anyone under 18, and we do not knowingly collect personal data from children. If you think a child has given us personal data, contact privacy@buildwithiris.com and we will delete it. If you build a website for children, you are responsible for the laws that protect them, such as COPPA in the United States.
12. Changes to this policy
We update this policy when our practices change. The version and date are at the top. For material changes we tell you in the app or by email before they apply.
13. Contact
Iris Studio (Jacob Foscalina), privacy@buildwithiris.com. Mailing address: coming soon.
Cookies
Checked against the code of this website and of the account pages
This website
buildwithiris.com sets no cookies. It has no analytics, advertising or tracking of any kind, and it loads nothing from other websites: its fonts, pictures and scripts all come from buildwithiris.com itself.
If you switch between the light and dark theme, your choice is kept in your own browser's storage under the name iris-theme. It is never sent to us, and clearing your browser's site data removes it.
The Iris Cloud account pages
The account pages at cloud.buildwithiris.com/account set two cookies, both needed for the pages to work. Both are first-party (sent only to cloud.buildwithiris.com), HttpOnly (page scripts cannot read them), Secure (sent only over an encrypted connection) and SameSite=Lax:
__Host-iris_sessionkeeps you signed in. It holds a random token (we keep only a hash of it) and ends 12 hours after you sign in, or when you sign out.__Host-iris_csrfprotects the forms you use before you are signed in against requests made by other websites. It holds a random value and lasts up to 2 hours.
No tracking, no ads
Neither site uses analytics, advertising or social media cookies, and neither shares anything about your visit with advertisers.
Iris Cloud subprocessors
Version: 0.1-draft · Effective: Draft, not yet final
These are the companies that process personal data on our behalf to run Iris Cloud. The Privacy policy explains what data we handle and why.
| Subprocessor | What it does for Iris Cloud | Data it processes | Where |
|---|---|---|---|
| Anthropic, PBC | Provides the Claude AI models that do Iris Cloud's AI work | The content of each AI request and answer (briefs, page text, code, screenshots, any personal data in them); request metadata | United States |
| Stripe, Inc. | Takes payments, runs subscriptions and renewals, issues invoices | Name, email, billing address, payment details, purchase history | United States |
| Google LLC (Google Cloud: Cloud Run and Cloud SQL) | Hosts the Iris Cloud gateway, its database and its logs | Account data, usage metering, security logs (no prompt or website content) | United States (us-central1) |
| Resend | Sends account emails from account@buildwithiris.com: sign-in codes, receipts, renewal reminders, cancellation confirmations | Name, email address, message content | United States |
Not subprocessors
- Openverse photo search needs no account or key. Searches go through the Iris Cloud gateway (above), which passes only the search words to Openverse, under Iris's own registered application; picked images are downloaded from Flickr or Wikimedia. Their terms and each image’s licence apply. Iris stores picked images with the site and preserves required credits.
- Services you connect to your own websites (Stripe, PayPal, Square, Plaid, Shopify, email and newsletter services, analytics, maps, Unsplash, Pexels, Cloudflare, Netlify, Vercel, GitHub and others). You use them with your own accounts and keys, Iris talks to them directly from your computer, and your agreement with them applies.
- Software and downloads on your computer: Podman and Ollama come with Iris; Podman downloads its Linux machine image from the Podman project's registry (quay.io) and the site builder's base system from Docker Hub when you set it up; Docker Desktop (Docker, Inc.) only if you choose and install it; and the AI model, downloaded through Iris's own Ollama from Ollama's model library. Ollama itself comes with Iris (MIT License). They run on your computer under their own terms.
Changes
We update this page before a new subprocessor starts processing personal data.
Iris end-user licence agreement
Version: 0.1-draft · Effective: Draft, not yet final
This agreement is between you and Jacob Foscalina, doing business as Iris Studio, a sole proprietor in California ("we", "us"). Mailing address: coming soon; until then, write to legal@buildwithiris.com. It covers the Iris desktop app for Windows, its updates, and the files and documentation that come with it ("Iris").
When you click Agree and continue in Iris, or install or use Iris, you accept this agreement. If you use Iris for a business or another organisation, you accept it for that organisation and confirm you are allowed to. If you do not agree, do not use Iris.
The short version
This summary is here to help you read the agreement. The full text below is what counts.
- Iris is free to download and use. The free app uses an AI model that runs on your own computer.
- The websites you make with Iris are yours. You can use, change, sell and publish them as you like.
- Cloud AI is available only through a paid Iris Cloud subscription, which has its own terms.
- Iris comes with Ollama (open-source software that runs the AI model) and Podman (open-source software that keeps your websites' code in a locked-down container), and downloads an AI model and a small Linux system when you click to. Their own terms apply to them. Docker Desktop is an optional alternative to Podman.
- AI can make mistakes. Check facts, prices, claims and legal text before you publish.
- Do not use Iris for scams, phishing, impersonation, malware or anything else our Acceptable use policy bans.
- Iris comes "as is", and our liability is limited.
1. Your licence to use Iris
1.1 We give you a personal, worldwide, non-exclusive, non-transferable, revocable licence to install and use Iris, free of charge, on computers you own or control, for as long as you follow this agreement.
1.2 You may use Iris for personal and commercial purposes, including building websites for your own business and for clients.
1.3 Some features need a paid Iris Cloud subscription. The Iris Cloud terms of service cover those features, and they apply in addition to this agreement.
2. What you may not do
You may not, and may not help anyone else to:
- sell, rent, lend, sublicense or redistribute Iris itself, except as an open-source licence allows for that component (section 3);
- remove or change copyright, licence or trademark notices in Iris;
- reverse engineer, decompile or disassemble Iris, except where the law or an open-source licence allows it;
- get around Iris's security, its sandbox for generated code, or the way Iris Cloud measures and charges for use;
- use Iris Cloud through Iris to offer a general AI service, or resell access to the AI models behind it;
- use Iris, or a website made with it, for anything the Acceptable use policy bans.
3. Open-source and other third-party components
3.1 Iris includes open-source software, fonts and other components made by other people. Each of them is licensed under its own licence, listed in the third-party notices that come with Iris (Settings → About & legal → Third-party licences, and the file THIRD_PARTY_NOTICES.txt).
3.2 For those components, their own licence applies instead of this agreement wherever the two differ. Nothing in this agreement limits the rights an open-source licence gives you, and where such a licence requires us to offer source code, we will.
3.3 The fonts Iris includes are licensed under the SIL Open Font License 1.1. You may use them in the websites you make. You may not sell the fonts on their own.
4. Software and AI models from other companies
4.1 To build websites on your computer, Iris uses software and models that other companies and projects make. Ollama and Podman come with Iris; the rest is downloaded when you click to, or installed by you:
- Podman (the Podman project and contributors) runs the code of your websites in a locked-down container. It comes with Iris, unchanged, under the Apache License 2.0, and is free for every person and business. When you set it up, it downloads a small Linux system (the Podman machine image, made from Fedora Linux, under GPL, LGPL, MIT and other open-source licences) from the Podman project's registry onto your computer, and the site builder's base system (node:24-bookworm-slim) from Docker Hub.
- Docker Desktop (Docker, Inc.) is optional: you can choose it instead of Podman in Runtime. Docker Desktop is free for personal use, education, non-commercial open-source projects and organisations with fewer than 250 employees and less than US$10 million in annual revenue. Larger organisations and government bodies need a paid Docker subscription. Check the Docker Subscription Service Agreement before you install it.
- Ollama (Ollama, Inc. and contributors) runs the AI model on your computer. It comes with Iris, unchanged, under the MIT License (its licence and those of the software inside it are listed in Iris's third-party notices).
- The AI model (currently Qwen3.8 27B, made by the Qwen team at Alibaba Cloud) is downloaded through Ollama from Ollama's model library when you click to download it. It is licensed under the Apache License 2.0 (see its model card).
- Photo tool models (BiRefNet and Real-ESRGAN) are downloaded from their projects' own releases the first time you use the photo tools. Their licences are MIT and BSD-3-Clause.
4.2 Apart from Ollama and Podman, which Iris includes unchanged under their open-source licences, we do not sell or distribute that software or those models. Your agreement for each of them is with the company or project that makes it, and their terms apply to your use. We are not responsible for them, for their availability, or for changes to their terms.
4.3 Iris never installs anything without your click. When it installs software through Windows Package Manager, that software's own installer may ask you to accept its terms, or accept them on your behalf because you agreed in Iris first. Iris tells you before you click.
5. Your content and your websites
5.1 You keep what you bring. Your briefs, text, photos, logos, artwork, product data and other material you give Iris ("your content") stay yours. You confirm you have the rights you need to use your content.
5.2 The websites you make are yours. As between you and us, you own the websites, code, text and images Iris produces for you ("your output"). To the extent we have any rights in your output, we assign them to you.
5.3 Iris's own building blocks. Your output may include files that Iris adds to every site: its motion and art kit, platform files and integrations (for example components/kit and lib files), the fonts, and open-source packages such as Next.js and React. We give you a perpetual, irrevocable, worldwide, royalty-free licence to use, copy, change and distribute our kit and platform files as part of your websites, including websites you build for and hand over to clients. The fonts and open-source packages stay under their own licences, which allow this use.
5.4 No guarantee of uniqueness. AI may produce similar results for different people, and the law may not protect AI-made material with copyright in every country. We do not promise that your output is unique, that you can register it, or that it does not resemble something else.
5.5 We do not claim any rights in your content or your output, and we do not use them to train AI models.
6. AI output: check it before you rely on it
6.1 Iris uses AI to plan, write, design, check and repair websites. AI output can be wrong, incomplete, misleading or out of date. Do not rely on factual statements in AI output without checking them yourself.
6.2 Read every page before you publish. Check names, prices, opening hours, claims about your products or services, and anything with legal, medical, financial or safety consequences.
6.3 Iris can write draft legal pages for your website (a privacy policy, terms, cookie consent) from the way your site is set up. They are drafts to start from, not legal advice. Have them checked for your business and the places you sell to.
6.4 The quality checks Iris runs are automatic tests and AI reviews. They find many problems, but not all of them, and a passing check is not a promise that a site is accessible, secure, lawful or free of errors.
7. Your responsibilities for the websites you publish
7.1 You decide what to publish, where and when. Nothing is published until you choose to publish it.
7.2 You are responsible for your websites and how they are used, including:
- the truth of what they say, and having the rights to the words, photos and marks they use;
- the laws that apply to your business and your visitors, such as privacy and cookie rules, consumer law, accessibility, tax and licensing;
- the services you connect to them, such as Stripe, PayPal, Square, Shopify, email, newsletter, analytics, maps and hosting providers, and following those services' terms;
- the data your published websites collect from their visitors (orders, bookings, accounts and messages). You are its controller; it is kept where you publish the site, not by us.
8. Keys and accounts for your sites' services
8.1 When you connect a service to a website (for example Stripe, PayPal, Shopify, an email service, Unsplash or Cloudflare), you enter that service's keys or sign-in in Iris. Iris keeps them on your computer, in its data folder (encrypted for your Windows account), and sends each one only to its own service when you use that feature, or to your own hosting account when you publish a site that needs it.
8.2 Those accounts and keys are yours and are governed by your agreements with those services. Keep your computer and your Windows account secure. We are not responsible for what happens in those accounts.
8.3 Iris does not let you connect your own API keys for cloud AI models. Cloud AI in Iris is available only through Iris Cloud.
9. Generated code and your computer
9.1 Iris runs the code it generates only inside a locked-down container on your computer (in Iris's own Podman, or in Docker Desktop if you chose it), not directly on Windows. This lowers the risk that a mistake in generated code affects your computer, but no software can remove all risk.
9.2 Iris stores your projects in its data folder on your computer. Keep your own backups.
10. Updates
Iris may check for and offer updates. Some updates fix security problems, and Iris Cloud may need a recent version of Iris to work. This agreement applies to updates unless an update comes with different terms.
11. Privacy
Our Privacy policy explains what stays on your computer, what is sent to which provider and when, and your rights.
12. Feedback
If you send us ideas or suggestions, we may use them without owing you anything. This does not give us any rights in your content or your output.
13. Ending this agreement
13.1 You can end this agreement at any time by uninstalling Iris.
13.2 We can end your licence if you seriously or repeatedly break this agreement or the Acceptable use policy, or if the law requires it. We will tell you where we reasonably can.
13.3 When the agreement ends, stop using Iris. Sections 3, 5, 6, 7 and 14 to 19 continue to apply. Your websites and your output remain yours.
14. No warranty
Iris is provided free and "as is" and "as available". To the fullest extent the law allows, we disclaim all warranties, whether express, implied or statutory, including merchantability, fitness for a particular purpose, title, non-infringement and that Iris will be uninterrupted, secure or error-free. Some places do not allow these exclusions; there, they apply only as far as the law allows.
15. Limit of liability
15.1 To the fullest extent the law allows, we are not liable for any indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, revenue, data, goodwill or business, arising from Iris or this agreement, even if we were told they were possible.
15.2 To the fullest extent the law allows, our total liability for all claims about Iris or this agreement is limited to US$50.
15.3 Nothing in this agreement limits liability that the law does not allow to be limited, such as liability for fraud, or for death or personal injury caused by negligence. If you are a consumer, you keep the rights consumer law gives you.
16. Indemnity
If you use Iris for a business, you will defend and indemnify us against third-party claims arising from your content, your websites or your breach of this agreement or the Acceptable use policy, and pay the resulting costs and damages a court awards or that you agree to in a settlement.
17. Export controls and sanctions
You confirm that you are not barred from receiving software under US or other applicable export or sanctions laws, and you will not use Iris in breach of them.
18. Governing law and disputes
18.1 This agreement is governed by the laws of the State of California and applicable US federal law, without regard to conflict-of-laws rules.
18.2 How disputes that cannot be settled informally are decided is still under review and will be set out here in the final version.
18.3 If you are a consumer in the European Union, the United Kingdom or another country whose laws give you the right to bring claims in your local courts, or under your local law, this section does not take that right away.
19. General
19.1 Changes. We may update this agreement. When a new version changes your rights or obligations, Iris shows it and asks you to accept it before you continue. The version and date are at the top.
19.2 Whole agreement. This agreement, together with the Acceptable use policy and, if you use Iris Cloud, the Iris Cloud terms, is the whole agreement between us about Iris.
19.3 Severability, waiver and assignment. If a court finds part of this agreement unenforceable, the rest still applies. Not enforcing a term is not a waiver. You may not transfer this agreement without our consent; we may transfer it with our business.
19.4 US government users. Iris is "commercial computer software" and is licensed to US government users only under this agreement.
19.5 Contact. Iris Studio (Jacob Foscalina), legal@buildwithiris.com. Mailing address: coming soon.
Iris acceptable use policy
Version: 0.1-draft · Effective: Draft, not yet final
This policy applies to everyone who uses Iris, the free desktop app and the paid Iris Cloud service, and to every website made with Iris. It is part of the End-user licence agreement and the Iris Cloud terms of service.
Iris is for building real websites for real businesses, people and causes. Use it honestly.
1. Anthropic's Usage Policy applies to Iris Cloud
Iris Cloud runs on AI models provided by Anthropic. When you use Iris Cloud, you must also follow Anthropic's Usage Policy, which we pass on to you as part of this policy. Anything that breaks Anthropic's Usage Policy breaks this policy too. Where the two differ, the stricter rule applies.
2. Never use Iris, or a website made with it, for
Fraud and deception
- Phishing: pages that imitate a real sign-in, bank, payment, delivery, government or support page, or that trick people into giving up passwords, codes or personal details.
- Credential or payment harvesting: fake checkouts, fake donation pages, card-testing pages, or forms that collect passwords, card numbers or bank details under false pretences.
- Impersonation: pretending to be a real person, company, brand, charity or public body, or using their name, logo, branding, photos or a look-alike domain in a way that could mislead people, without their permission. Clearly labelled parody and fan sites that do not mislead anyone are allowed.
- Fake reviews and endorsements: made-up reviews, ratings, testimonials, client logos, awards, press mentions or endorsements, or reviews written by the business about itself as if by customers.
- Fake documents: fake receipts, invoices, order confirmations, tickets, certificates, licences, IDs or official letters.
- Scams: fake shops that will not deliver, investment, crypto or giveaway scams, advance-fee fraud, fake jobs, fake charities, or prices and subscriptions designed to trap people.
Harm to computers and networks
- Malware, viruses, ransomware, spyware, cryptominers, exploit kits, drive-by downloads or hidden scripts.
- Attacking, scanning or overloading systems you are not authorised to test.
Harm to people
- Sexual content involving minors in any form. We report child sexual abuse material to the National Center for Missing & Exploited Children and to the authorities.
- Sexually explicit content.
- Intimate images shared without consent.
- Harassment, threats, stalking, or publishing someone's private information (doxxing).
- Content that promotes violence, terrorism or hatred against people for who they are.
- Selling or promoting illegal goods or services, including weapons and drugs where they are illegal.
- False information about elections or voting, or impersonating candidates or officials.
Other people's rights
- Copying other people's websites, text, photos, designs, logos or trademarks without permission.
- Collecting personal data without telling people and getting the consent the law requires, or tracking visitors without consent where the law requires it.
Spam
- Spam, doorway pages, keyword-stuffed pages or link schemes meant to game search engines.
3. Rules for AI features
- Tell visitors about AI chat. If your website has an AI assistant that talks to visitors, it must say clearly that it is an AI, at least at the start of each conversation or in the chat window. Iris's visitor assistant does this; keep it that way.
- Review high-stakes advice. If your website gives legal, medical, mental health, financial, tax, insurance, credit, housing, employment or education advice, a qualified person must review the AI-written content before it goes live, and you must tell visitors where AI was used if the law or Anthropic's Usage Policy requires it.
- Check facts. Do not publish AI-written claims (prices, results, qualifications, health or safety claims) that you have not checked.
- Do not get around safety systems. Do not try to make the AI produce content it refuses, or hide what you are asking for.
- Iris Cloud is for Iris. Do not resell it, use it as a general AI service, or use its output to build or train a competing AI model.
4. Rules for the service
- Do not share your Iris Cloud account, or get around credits, limits or metering.
- Do not probe, attack or overload Iris Cloud, or use it in a way that harms other users.
5. What we do about breaches
Depending on how serious the breach is, we may:
- warn you and ask you to fix it;
- stop jobs, limit or suspend Iris Cloud, or close your account;
- end your licence to use Iris;
- tell the host, registrar or payment provider of a harmful website;
- report it to the police or other authorities, and keep the information the law requires.
Websites made with the free desktop app are built on your computer and published to your own hosting account. We cannot see them or take them down ourselves, but we pass on credible reports to the company that hosts them.
6. How to report abuse
If you see a website made with Iris used for phishing, scams, impersonation, malware or anything else this policy bans, email abuse@buildwithiris.com with:
- the address of the website or page;
- what is wrong, and any screenshots or other evidence;
- how we can reach you (optional, but it helps us follow up).
What happens next:
- We confirm we received your report within 2 business days.
- We review it. Reports of child sexual abuse material, active phishing and malware are handled first.
- If the site uses Iris Cloud or breaks our terms, we act as in section 5. If it is hosted elsewhere, we send the report to its host and registrar, and we tell you where else you can report it.
- We tell the account holder about the report where we lawfully can, without your name unless you agree or the law requires it.
- We let you know the outcome where we can.
If someone is in immediate danger, contact the police first. Copyright complaints follow our Copyright and DMCA policy.
7. If we act on your account
We tell you what we did and why, where we lawfully can. If you think we made a mistake, reply to our message or email support@buildwithiris.com within 30 days, and a person who was not involved in the first decision will review it.
8. Changes
We may update this policy. The version and date are at the top.
Copyright and DMCA policy
Version: 0.1-draft · Effective: Draft, not yet final
For later. Iris does not host websites today: people publish the websites they make with Iris to their own hosting accounts (Cloudflare, Netlify, Vercel, GitHub and others), and Iris Cloud does not store website content. Copyright complaints about a published website should go to its host. This policy applies only if Iris starts hosting websites or other user content.
Iris Studio respects copyright and expects Iris users to do the same. Under the US Digital Millennium Copyright Act (17 U.S.C. § 512), we respond to clear notices of claimed infringement in content we host.
1. Sending a notice of claimed infringement
Send your notice to our designated agent:
Designated agent: to be designated
Iris Studio
Mailing address: coming soon
dmca@buildwithiris.com
Your notice must include:
- your physical or electronic signature, as the copyright owner or someone authorised to act for them;
- the copyrighted work you say is infringed (or, for many works, a representative list);
- the material you say infringes, and enough information for us to find it, such as its web address;
- your name, address, phone number and email address;
- a statement that you believe in good faith that the use is not authorised by the copyright owner, its agent or the law; and
- a statement that the information in the notice is accurate and, under penalty of perjury, that you are the owner or authorised to act for the owner.
We may send a copy of your notice, including your contact details, to the person who posted the material.
2. What we do
When we receive a valid notice, we remove or disable access to the material promptly and tell the person who posted it.
3. Counter-notice
If your material was removed and you believe it was a mistake or you have the right to use it, send our agent a counter-notice with:
- your physical or electronic signature;
- the material that was removed and where it was before;
- a statement, under penalty of perjury, that you believe in good faith it was removed by mistake or misidentification;
- your name, address and phone number, and a statement that you consent to the jurisdiction of the federal court for your address (or, outside the United States, any judicial district where we may be found) and will accept service of process from the person who sent the notice.
We forward it to the person who sent the notice. Unless they tell us within 10 business days that they have started a court action, we restore the material 10 to 14 business days after receiving the counter-notice.
4. Repeat infringers
We close the accounts of people who repeatedly infringe copyright, in appropriate circumstances.
5. False claims
Knowingly misrepresenting that material infringes, or that it was removed by mistake, can make you liable for damages (17 U.S.C. § 512(f)).
6. Trademarks and other complaints
For trademark complaints, impersonation or other abuse, see the Acceptable use policy or email abuse@buildwithiris.com.